Dynamics RLS rules conflict

[torstew]

Hello

I have tried to provide a rudementary example of a data model to describle the scenario, below.

In short, we have implemented dynamics RLS.

Each role works individually, but when I enable both they conflict as there is effectively an overlap.

The problem / access I am trying to solve is that a user should only be able to see data for their businessunit but effectively two different ways, they can see:

1. any opportunity data owned by their business unit and any invoices related to these opportunities, AND

2. all invoices owned by their business unit and any opportunities relating to those invoices

As mentioned, I have created roles that individually work, but due to the relationship between opportunities and invoices, the filters once both enabled effectively create an error.

I presume the only way to address this is some form of DAX formula, but I don't know how.

I can confirm that I can create static RLS for the scenarios, and apply the two static roles per business unit, but as there are around 30 business units, two roles each, and hundreds of potential users it's an exceptional admin overhead to manage.

Any thoughts or recomendations would be much appreciated.

Thank you.

[lbendlin]

Highly recommend you watch the replay of today's Power BI Dev bootcamp session when it comes out.

Session 18: Developer Deep Dive into Row Level Security (RLS) · Power BI Dev Camp (powerappsportals....

[torstew]

Thanks for sharing. Is it usually available soon after?

[lbendlin]

yes, check back in a day or so.